Port forwarding in RouterOS
Also called port mapping etc
DdeC 20 Oct 21
updates;


- -

To port forward an external port to a port on a local machine (using WebFig).


- In IP>Firewall>NAT, add a new rule, enabled, with chain 'dstnat'.
- Set protocol, eg 6 (tcp) for webserver.
- Set the Dst. Port to the exterior-facing port desired (ie from the internet), eg 443 for https.
- Set the In Interface to the WAN interface, eg ether1 (or use In interface list).
- Set 'Action' to dst-nat.
- Further down, set To Addresses to the (static) IP address of the appropriate local machine and To ports to the relevant port.
- If logging of incoming requests on the Dst. Port is desired, complete the logging details
- Make a Comment for documentation of the entry if desired.
- Apply, and check the entry in the Firewall>NAT page. Drag the rule to the desired position in the list if necessary.
- (optional) According to ref. 2, to see the effect of changes, 'the connection tracking table should be cleared otherwise NAT rules may seem to be not functioning correctly until connection entry expires' (& see ref. 3).



Reference: 
1. (old manual) https://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Destination_NAT
2. https://help.mikrotik.com/docs/display/ROS/NAT#NAT-Introduction
3. recommended terminal command from https://forum.mikrotik.com/viewtopic.php?t=103812 to accomplish this; 
	/ip firewall connection remove [find]